Nothing left to chance.
Explained simply, because we have nothing to hide.
The four questions people ask us, answered at a glance.
Never gets in
- Other AI companies
- Advertisers
- Other customers
Where does an answer go?
It stays inside your study. Lontra keeps it, the AI reads it in the region you choose, and you read the findings. Nothing else gets in.
- Encrypted in transit, private links stored as hashes
- The AI runs in Europe or the United States: you choose for each study
- No other AI provider, no fallback to another region
Who can read the answers
Who can see it?
Only the organiser, and the AI that does the work. Lontra is not anonymous: participants are told before they start that the organiser reads their answers.
- Email addresses are never sent to the AI
- Participants never see each other’s answers
- Every support access is logged
How long do you keep it?
90 days on the Free plan, up to 2 years on a paid plan. On a paid plan you choose, study by study. Then the study is deleted for good, shared documents included.
Any time: export your findings for free, or ask us to delete a study.
Who checks us?
Independent auditors, and contracts. We do not ask you to take our word for it.
- SOC 2 and ISO 27001 audits are under way
- Certificates are shown here once issued
The details, if you want them
What does the AI do, exactly?
It asks questions within the topics you approved, reads the documents people choose to share, then writes the findings. Every quote is checked against what people actually said, and it tells you when the evidence is not enough. It never decides anything about a person.
Where exactly is the data stored?
Lontra stores it on its servers, hosted by Hostinger. The AI runs on Google Cloud, in Europe (Belgium) or the United States (Iowa): you choose for each study, and it never falls back to another provider or region.
Which companies help us?
Hostinger (hosting), Google Cloud, Gemini on Vertex AI (the AI only), Postmark (emails), Stripe (payments, we never see your card), PostHog in the United States (product analytics on organiser pages, with consent, never on participant pages) and Google Analytics (public pages, with consent).
Can a participant stop or ask for deletion?
Yes. They can stop at any time, stop follow-ups from any email, and ask for their answers to be deleted through the privacy notice.